lenovo

thinkserver_rd340_firmware

2 known vulnerabilities · sorted by CVSS score

CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

openslp / openslp+43

Network

Published Apr 23, 2018

CVE-2018-9086

HIGH7.2

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.

lenovo / thinkserver_rd340_firmware+3

Network

Published Nov 16, 2018